high7.2Public exploit code
CVE-2002-0137
CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (4)2002-01-13 · local · linux · Verified
- CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (3)2002-01-13 · local · linux · Verified
- CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (2)2002-01-13 · local · linux · Verified
- CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (1)2002-01-13 · local · linux · Verified
Impact
CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andreas Mueller | Cdrdao | Versions 1.1.4, 1.1.5 |